Company Overview
Vinova is an award-winning development company specializing in mobile, web, and enterprise applications. We serve global clients across IoT, blockchain, fintech, banking, networking, and ecommerce, delivering quality, flexible, and fast solutions through passionate collaboration.
Job Summary
Design and develop secure, scalable full stack applications and automation solutions to support second-line monitoring and assessment of First Line of Defence risk controls, ensuring compliance and facilitating remediation with advanced technology and stakeholder collaboration.
Responsibilities
- Design, develop, deploy, and maintain secure, scalable full stack applications and automation solutions to support systematic second-line monitoring and assessment of First Line of Defence risk controls
- Translate IM8, cybersecurity, governance, and internal control requirements into configurable rules, workflows, and automated checks to identify compliance gaps, enable timely escalation, and track remediation while ensuring appropriate human review
- Take ownership of end-to-end application development by integrating responsive user interfaces, backend services, databases, cloud infrastructure, and workflow functions for compliance assessment, evidence review, and exception management
- Develop dashboards and management reports that clearly display compliance status, identified gaps, remediation progress, risk trends, and supporting evidence
- Establish and enforce secure software engineering practices including authentication, authorization, API and frontend security, encryption, secrets management, audit logging, code review, automated testing, vulnerability management, and secure deployment
- Explore and implement Artificial Intelligence-assisted capabilities to analyze documents and evidence, identify potential control gaps, and improve efficiency and consistency of second-line checks with appropriate human oversight
- Collaborate closely with TGA, Cybersecurity, system owners, and other stakeholders to gather requirements, validate automated checks, and continuously enhance solution accuracy, scalability, and usability
Required Competencies And Certifications
- Degree or tertiary qualification in Computer Science, Software Engineering, Information Systems, Electronics Engineering, Information Technology, or an equivalent discipline
- Minimum 5 years of relevant experience in software engineering, full stack application development, or automation, including participation in at least three Agile or full project development life cycles and supporting production-grade solutions
- Strong proficiency in frontend and backend development using technologies such as JavaScript or TypeScript, React.js, Next.js or Vue.js, together with Node.js, Python, Java, or .NET
- Hands-on experience in database design, SQL or PostgreSQL, data processing and transformation, API development, and system integration using REST, GraphQL, gRPC, or WebSockets
- Experience in cloud solutioning and deployment on AWS, Azure, or Google Cloud; familiarity with Government Commercial Cloud is advantageous
- Experience with DevSecOps practices, CI/CD pipelines, source-code management, containerization, orchestration, and Infrastructure as Code tools such as GitHub Actions, GitLab CI, Jenkins, Docker, Kubernetes, Terraform, or CloudFormation
- Good knowledge of secure software development practices including authentication, authorization, JWT, API security, IAM, secrets management, CSP, CORS, XSS prevention, and OWASP Top 10
- Experience with automated unit, integration, frontend, backend, and contract testing using appropriate tools and frameworks
- Knowledge of IT compliance, cybersecurity, governance, risk management, or audit processes, with the ability to translate control requirements into automated validation rules
Preferred Competencies And Qualifications
- Knowledge and experience of IM8, NIST, ISO 27001/2, or other relevant ICT security policies and standards
- Experience with Artificial Intelligence or Large Language Model tools, document analysis, Retrieval-Augmented Generation, workflow systems, dashboards, or data visualization
- Experience with web scraping, batch processing, serverless services, low-code applications, or troubleshooting application, infrastructure, and security issues
- Strong analytical, problem-solving, and troubleshooting skills focused on data quality, control accuracy, and maintainable solution design
- Strong interpersonal and stakeholder management skills with the ability to work independently and effectively in cross-functional, multi-disciplinary teams and communicate technical concepts clearly